You are specifying the caller user by the access token XKtBcdm0OlFzAzrly0VA-bcRKOeikIE-SqpzdfAJRzo.

In the default permissions, only the group members, a group owner, or the KiiObject creator can create an object in the group scope bucket. So, the caller user has to be a member of the group in the regular case.